General
- Target mips.elf
- Size 249KB
- Sample251020-ejznradt5f
- SHA256 48c570152390e90bd89c12e37a59feb7cbcccd1fd03dc270dc4c1214053ac722
- MD5 e1e8fefd0dab675c59388d6d04c7a566
- SHA1 f578baca4ff29a32cf3e0156f527461e3b377f26
- SHA512 928471e78eecd70adb22182ceb2f0ee2ec5620edf42aeaed7b18a788fb92c52df9f1f316647b1d31a9a39bf8366afec9578247cd11fc20315e6c569a781293d9
- SSDEEP 3072:9As0kWgNwAga5HSFnzbQAdL4ayHgBTvi2cPnNMBvtNwRECW4vJt:6sHSOHSFwAdL0APgSBDwRzW4v
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20250619-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target mips.elf
- Size 249KB
- SHA256 48c570152390e90bd89c12e37a59feb7cbcccd1fd03dc270dc4c1214053ac722
- MD5 e1e8fefd0dab675c59388d6d04c7a566
- SHA1 f578baca4ff29a32cf3e0156f527461e3b377f26
- SHA512 928471e78eecd70adb22182ceb2f0ee2ec5620edf42aeaed7b18a788fb92c52df9f1f316647b1d31a9a39bf8366afec9578247cd11fc20315e6c569a781293d9
- SSDEEP 3072:9As0kWgNwAga5HSFnzbQAdL4ayHgBTvi2cPnNMBvtNwRECW4vJt:6sHSOHSFwAdL0APgSBDwRzW4v
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (188621) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Enumerates running processes
Discovers information about currently running processes on the system